I think I’ve seen that asked before, but can’t find the post now. I also know quite some instances of Fedi use Cloudflare.

  • hendrik@palaver.p3x.de
    link
    fedilink
    English
    arrow-up
    0
    arrow-down
    2
    ·
    edit-2
    7 days ago

    Supposedly, yes. Though I only ever read about attacking with uploaded images, maybe lots if requests which are crafted to result in expensive database queries… I’m not sure if it’s ever something Cloudflare could protect from? I mean all their advertising about security, mitigation and prevention sure goes down like oil. But I sometimes wonder if it’s just 100% snake-oil for use-cases like this…

    I think the fire-extinguisher is a proper set up of Linux, updates, backups, and a web application without a lot of issues in the program code, and a minimum of attack surface.